DS-13.18

Mission Critical?
Required
Security Control

Address all Risk Treatment Plans within 6 months

High Data
Required
Moderate Data
Required
Restricted Data
Required
Low Data
Required

DS-13.12

Mission Critical?
Required
Security Control

Conduct risk assessments with new implementations

High Data
Required
Moderate Data
Required
Restricted Data
Required
Low Data
Recommended

DS-13.10

Mission Critical?
Required
Security Control

Conduct risk assessments with major system changes

High Data
Required
Moderate Data
Required
Restricted Data
Required
Low Data
Recommended